Overview
Elevarq Signals is an open-source (BSD-3-Clause) diagnostic collector for PostgreSQL that runs entirely inside your own AWS environment. It connects to a managed database, collects a structured, read-only diagnostic snapshot on a schedule, and keeps every byte local — no telemetry, and no diagnostic-data egress to Elevarq.
Your data stays in your account
- The only outbound calls are the cloud-authentication and TLS requests you configure, made to your own AWS services.
- Snapshots are written locally and exported as a portable archive for downstream analysis.
Read-only by design
- Read-only access is enforced by three independent layers.
- Unsafe roles (superuser, replication) are blocked before collection begins.
Passwordless onboarding on Amazon RDS and Aurora
- Connect with RDS IAM authentication — no long-lived database password to store or rotate.
- Or use a cloud secret store: AWS Secrets Manager or AWS Systems Manager Parameter Store.
- Every connection uses verify-full TLS and a least-privilege pg_monitor role.
Production-ready packaging
- Signed, multi-architecture container (linux/amd64 and linux/arm64), shipped with an SBOM.
- Helm chart for Amazon EKS with liveness/readiness probes, least-privilege security contexts, and a persistent volume for local snapshots.
Highlights
- Read-only by design: three independent enforcement layers, with unsafe roles (superuser, replication) blocked before collection starts
- Passwordless onboarding to Amazon RDS and Aurora via RDS IAM (or a cloud secret store) over verify-full TLS with a least-privilege pg_monitor role
- Local-first: no telemetry and no diagnostic-data egress to Elevarq; signed multi-arch container and Helm chart for Amazon EKS
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
This product is offered free of charge. There are no fees and therefore no refunds. Support is community-based via GitHub Issues at https://github.com/Elevarq/Signals .
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Helm chart (Amazon EKS)
- Amazon EKS
Helm chart
Helm charts are Kubernetes YAML manifests combined into a single package that can be installed on Kubernetes clusters. The containerized application is deployed on a cluster by running a single Helm install command to install the seller-provided Helm chart.
Version release notes
Elevarq Signals 1.0.0 (GA). Passwordless PostgreSQL diagnostic collector delivered as a cosign-signed Helm chart. Connects to your databases using IAM/AD tokens at connect time (Amazon RDS IAM, Azure Entra, GCP Cloud SQL IAM) - no password stored. No telemetry and no diagnostic data sent to Elevarq. Release notes: https://github.com/Elevarq/Signals/releases/tag/v1.0.0
Additional details
Usage instructions
-
Authenticate Helm to the AWS Marketplace registry: aws ecr get-login-password --region <region> | helm registry login --username AWS --password-stdin 709825985650.dkr.ecr.us-east-1.amazonaws.com
-
Install into your cluster: helm install signals oci://709825985650.dkr.ecr.us-east-1.amazonaws.com/elevarq/elevarq-signals-chart --version 1.0.0 -n signals --create-namespace
-
Configure the collector for your PostgreSQL targets; Amazon RDS IAM authentication is recommended (no password required). Full configuration: https://elevarq.com/docs/signals
Resources
Vendor resources
Support
Vendor support
Community support via GitHub Issues at https://github.com/Elevarq/Signals . Report security vulnerabilities to security@elevarq.com (see SECURITY.md).
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.